Red Hat Security Advisory: mod_cluster-native security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2011-4608 — mod_cluster: malicious worker nodes can register on any vhost
🎯 Affected products1
- Red Hat JBoss Web Platform 5.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). To apply the update: 1) Download the update for the Native components for JBoss Enterprise Web Platform 5.1.2. 2) Copy the Apache HTTP Server modules provided by the update to your JBoss Enterprise Web Server front-end. 3) Restart the Apache HTTP Server on your JBoss Enterprise Web Server front-end. Refer to the "Install proxy server components" section of the HTTP Connectors Load Balancing Guide for JBoss Enterprise Application Platform 5, available from docs.redhat.com, for further information (JBoss Enterprise Web Platform is a subset of JBoss Enterprise Application Platform).
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2012:0040
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=enterpriseweb.platform&downloadType=securityPatches&version=5.1.2
- externalhttp://docs.redhat.com/docs/en-US/index.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=767020
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0040.json